# Linux Network Administrator’s Guide The Linux Network Administrator’s Guide is designed to provide network administrators with essential commands and practices for configuring, monitoring, and troubleshooting networks on Linux-based systems. This guide covers key aspects of network administration, from basic configurations to advanced topics. # **Table of Contents** ## **Network Configuration** * Display Network Interfaces and IP Addresses * Configure Network Interface * Display Routing Information * Set Default Gateway * DNS Configuration ## **Network Monitoring** * Monitor Network Connections * Capture Network Packets ## **Firewall Management** * Display iptables Rules * Allow Incoming Traffic * Block Incoming Traffic ## **Network Troubleshooting** * Check Network Connectivity * DNS Lookup * Check Open Ports # **1\. Network Configuration** ## **Display Network Interfaces and IP Addresses** ***\# Display information for all network interfaces*** ```powershell $ ifconfig ``` The ifconfig command provides a comprehensive view of all network interfaces along with their current configuration details, including IP addresses, MAC addresses, and more. ***\# Display detailed information for all network interfaces*** ```powershell $ ip addr show ``` The ip addr show command, part of the iproute2 package, offers more detailed information about network interfaces, including IPv4 and IPv6 addresses, broadcast addresses, and the current status. ## **Configure Network Interface** ***\# Configure a network interface with a static IP address*** ```powershell $ sudo ifconfig eth0 192.168.1.2 netmask 255.255.255.0 up ``` This command configures the eth0 interface with a static IP address (192.168.1.2) and a netmask of 255.255.255.0. The up parameter activates the interface. ***\# Configure a network interface with DHCP*** ```powershell $ sudo dhclient eth0 ``` The dhclient command requests an IP address from a DHCP server for the specified interface (eth0 in this case). ## **Display Routing Information** **\# Display the routing table** ```powershell $ route -n ``` The route -n command shows the system’s routing table, including destination networks, gateways, and interface associations. ***\# Display the routing table using ip command*** ```powershell $ ip route show ``` The ip route show command, part of the iproute2 package, provides a modern and more flexible way to display routing information. ## **Set Default Gateway** ***\# Set the default gateway*** ```powershell $ sudo route add default gw 192.168.1.1 ``` This command sets the default gateway for the system, directing traffic not matching any specific route to the specified gateway (192.168.1.1). ***\# Set the default gateway using ip command*** ```powershell $ sudo ip route add default via 192.168.1.1 ``` The ip route add default via command is an alternative to the route command for setting the default gateway. ## **DNS Configuration** ***\# Display DNS information*** ```powershell $ cat /etc/resolv.conf ``` The /etc/resolv.conf file contains DNS configuration information, including the IP addresses of DNS servers. ***\# Edit DNS configuration*** ```powershell $ sudo nano /etc/resolv.conf ``` Use a text editor, such as nano, to edit the DNS configuration. This file allows specifying DNS servers and search domains. # **2\. Network Monitoring** ## **Monitor Network Connections** ***\# Display active network connections*** ```powershell $ netstat -tunlp ``` The netstat -tunlp command shows active network connections along with the associated processes and listening ports. ***\# Display listening ports*** ```powershell $ ss -tunlp ``` The ss -tunlp command provides similar information to netstat but is part of the iproute2 package. ## **Capture Network Packets** ***\# Capture packets on a specific interface*** ```powershell $ sudo tcpdump -i eth0 ``` The tcpdump command captures and displays network packets on the specified interface (eth0 in this example). ***\# Capture packets on a specific port*** ```powershell $ sudo tcpdump port 80 ``` Use the port option to capture packets related to a specific port (e.g., port 80 for HTTP traffic). # **3\. Firewall Management** ## **Display iptables Rules** ***\# Display all iptables rules*** ```powershell $ sudo iptables -L ``` The iptables -L command shows the current rules configured in the iptables firewall. ***\# Display detailed iptables rules with line numbers*** ```powershell $ sudo iptables -L -n - line-numbers ``` Adding the — line-numbers option to iptables -L displays the rules with line numbers, aiding in management. ## **Allow Incoming Traffic** ***\# Allow incoming traffic on a specific port*** ```powershell $ sudo iptables -A INPUT -p tcp - dport 22 -j ACCEPT ``` This command appends a rule to the INPUT chain, allowing incoming TCP traffic on port 22 (SSH). ## **Block Incoming Traffic** ***\# Block incoming traffic on a specific port*** ```powershell $ sudo iptables -A INPUT -p tcp - dport 80 -j DROP ``` This command appends a rule to the INPUT chain, blocking incoming TCP traffic on port 80. # **4\. Network Troubleshooting** ## **Check Network Connectivity** ***\# Ping a host to check network connectivity*** ```powershell $ ping google.com ``` The ping command sends ICMP Echo Request messages to a host, checking for network connectivity. ***\# Trace the route to a host*** ```powershell $ traceroute google.com ``` The traceroute command traces the route that packets take to reach a destination, showing each hop along the way. ## **DNS Lookup** ***\# Perform DNS lookup*** ```powershell $ nslookup google.com ``` The nslookup command performs DNS lookups, providing information about domain names and IP addresses. ***\# Resolve IP address to hostname*** ```powershell $ host 8.8.8.8 ``` The host command resolves an IP address to its associated hostname. ## **Check Open Ports** ***\# Check if a specific port is open*** ```powershell $ telnet localhost 22 ``` The telnet command checks if a specific port (e.g., port 22 for SSH) is open on a local or remote system. ***\# Check if a specific port is open using nc*** ```powershell $ nc -zv localhost 22 ``` The nc command (netcat) with options -zv checks for open ports without sending any data. This comprehensive guide provides Linux network administrators with essential commands and examples for configuring, monitoring, and troubleshooting networks on Linux-based systems. Adjust parameters and options based on specific requirements and scenarios.